Blackberry 8330 ESN Change help???/

[amit kanpur]

Blackberry 8330 ESN Change
how to write esn,min

help senior very urgent

[sayyedikram]

do u have cdma workshop paid version then u can do it otherwise nooooo

[~AKSingh~]

Originally Posted by jagritisharma

Blackberry 8330 ESN Change
how to write esn,min

help senior very urgent

@jagritisharma

There are lot of confusions and results regarding blackberry esn repair
if you want a sure shot result use cdmaworkshop lisenced version
or else read below , using unicdma how esn can be repaired

Here both the process are mentioned , you have to decide what suites you

So here we go..

Process Strictly Confined to Educational Purposes Only

By Unicdma

1) Install QXDM (2.08 Release Recommended)

2) Install Blackberry Desktop Manager (Should create two RIM Virtual Ports on PC)

3) Run Blackberry Desktop Manager the entire time (Device should show connected)

4) Using UniCDMA read MSL/SPC from the following:

Sprint BB MSL/SPC are usually located here: 0x10700000-0x10720000

Blackberry 8130 Pearl
Address: 0x106C0000 Length: 1703936
Address: 0x10130000 Length: 500000

Blackberry 8330 Curve
Address: 0x10700000 Length: 1703936

Blackberry 8703e
Address: 0x10050000 Length: 1703936

Blackberry 8800
Address: 0x10630000 Length: 1703936

Blackberry 8830 WE
Address: 0x10600000 Length: 500000

5) With WinHex (or equivalent HEX Editor) search for 6-digit code in the memory dump by using the GATHER TEXT feature in the SPECIALIST menu. Use this tool to filter out unnecessary characters. I recommend setting the GATHER TEXT feature to 6 succession, only numbers and have Unicode characters tolerated.

6) Once you obtain the SPC/MSL, exit UniCDMA and run QXDM.

7) Configure QPST (globe in system tray) and QXDM to the correct ports, phone must show detected.

8) Using QXDM (ensure VIEW is set to COMMAND OUTPUT) type the following commands:

a) mode offline-d
Turns radio off and sets to service mode. Check phone radio is off.

b) spc "******"
Replace asteriks with the 6 digit code. Output should read successful.

c) pr_list_wr 0 "C:\prl_1039.prl"
If needed change file path to location of PRL. Output should read successful.

d) nv_write sec_code {"000000"}
Optional: use this command to change code to zeros or another 6 digits.

e) mode reset
Reboots phone to reset mode.

9) Finally, through the phone type #4357* (#HELP*) to verify the PRL write.

10) To access NAM Programming, dial ##6digitMSL and press SEND


NOTE: If your PRL reverts (Sprint) back to original, you will need to disable NAM_LOCK and change the REGISTRATION ID to 2004 or your local HOME SID.

QXDM NAM Lock Disable:
a) nv_read nam_lock (should read enabled, which we'll change in the next command)
b) nv_write nam_lock 0 0 (disables)

For the Registration ID, you can change it via three common methods: UniPST, QXDM, or within the phone.

UniPST Reg ID
Use the RIM 7250c DLL and change the REGISTRATION ID and ID LIST to 2004 or your HOME SID

QXDM Reg ID
These commands will change ID to 2004, you can change the HEX values to modify it to your HOME SID
2.x Series:
mode offline-d
spc "000000"
nv_write_item 11055 0xD4 0x07
nv_write_item 11089 0x01 0xD4 0x07
mode reset
3.x Series:
mode offline-d
spc "000000"
requestnvitemidwrite 11055 0xD4 0x07
requestnvitemidwrite 11089 0x01 0xD4 0x07
mode reset

Within Phone Reg ID
Dial ##6digitMSL and press SEND
Show menu, select Edit REG ID
Enter your desired REG ID and remove all other entries
Save changes

I am sure no body will like this long risky process , but this is 100% working
all depend on your skill

br,

[rajinder1978]

Hi
I am facing a Problam in BB 8330 (MEID Baesd) Phone version v4.5.0.66 this Phone is Issued by TATA Indicom.

I have to Changed ESN succusfully. Problam in MIN Writing by Both Method Ist is CDMA Workshop v3.6.0 & 2nd is Manual Edit in Programing by ##SPC.

When I Change MIN Manualy Then Show is "Invalid IMSI_S for TATA". & When I Write by CDMA Workshop after succusfull write then Automatic Change Default MIN in the Phone.

Sir Please suggest me how can I Solve this Problam asap.

Thanks & Regards
Rajinder Aggarwal

[sayyedikram]

Use QXDM to reset SPC & set NAM to false
ASSUMING YOU HAVE SPC ALREADY

Using QXDM (ensure VIEW is set to COMMAND OUTPUT) type the following commands:

mode offline-d
Turns radio off and sets to service mode. Check phone radio is off.

spc "000000"
Replace asteriks with the 6 digit code u found using UniCDMA. Output should read successful.

nv_write nam_lock 0
(VERY IMPORTANT)
and some other command also try to disable min lock
the command for nam lock is:

nv_write nam_lock "disabled"
or
nv_write nam_lock disabled
or
nv_write nam_lock 0

can't remember very well
ESN REPAIR:

If the Value is 0x2A then Phone is ESN Based
If the Value is 0x3A then Phone is MEID Based

mode offline-d
RequestNVItemRead "lock_code"
RequestNVItemRead "sec_code"
RequestNVItemWrite "sec_code" "000000"

password ****************

RequestNVItemRead scm
RequestNVItemWrite scm 0x2a
RequestNVItemWrite scm 0x3a

RequestNVItemRead esn
RequestNVItemWrite esn 0x0 (This zeros ESN)
RequestNVItemWrite esn 0x00000000 (This zeros ESN)

RequestNVItemRead meid
RequestNVItemWrite meid 0x0000000000000000 (Use to zero)
RequestNVItemWrite meid 0x00a1000001234abc (use to write actual MEID)


mode reset

BB REG ID (set REGID to 2004)
requestnvitemidwrite 11055 0xD4 0x07
requestnvitemidwrite 11089 0x01 0xD4 0x07
(Join the two together in reverse (endian) and then proceed to convert it to decimal:
D4 07 (stored) converts to 07D4 (actual output) which is 2004 (decimal output))

Reset Call Timers:
RequestNVItemWrite "call_timer_g" 0
RequestNVItemWrite "life_timer_g" 0
RequestNVItemWrite "life_cnt" 0
RequestNVItemWrite "air_timer" 0 0

There is no easy way to write the PRL in 3.x

[~AKSingh~]

Originally Posted by rajinder1978

Hi
I am facing a Problam in BB 8330 (MEID Baesd) Phone version v4.5.0.66 this Phone is Issued by TATA Indicom.

I have to Changed ESN succusfully. Problam in MIN Writing by Both Method Ist is CDMA Workshop v3.6.0 & 2nd is Manual Edit in Programing by ##SPC.

When I Change MIN Manualy Then Show is "Invalid IMSI_S for TATA". & When I Write by CDMA Workshop after succusfull write then Automatic Change Default MIN in the Phone.

Sir Please suggest me how can I Solve this Problam asap.

Thanks & Regards
Rajinder Aggarwal

you had been replied
http://forum.gsmhosting.com/vbb/f128...ml#post6455879

br,

[MOHIT_THAREJA]

can any one upload qxdm 2.08

[pkbarawal]

how to get spc of 8703e reliance

[MOHIT_THAREJA]

ak singh upload uicdma qxdm how to do this process i cant understad how to change esn of blackberry 8330 how to use unicdma

[chicolindo]

Originally Posted by tharejamohit

can any one upload qxdm 2.08

QXDM_2.08.rar - 4shared.com - online file sharing and storage - download

[vishnu22]

Hi,

I have one CDMA Blackberry 8130 Now i want to do Min programming But i Don't have 6 Digit code please help how can i resolve this issue Esn 4CE51A49

Thanks & Regards
Vishnu Sharma

[~AKSingh~]

Originally Posted by vishnu22

Hi,

I have one CDMA Blackberry 8130 Now i want to do Min programming But i Don't have 6 Digit code please help how can i resolve this issue Esn 4CE51A49

Thanks & Regards
Vishnu Sharma

SPC is in nv area
area no 85

br,